Google Confirms Apple iPhone Bricking iMessage Bomb | Forbes

Google’s Project Zero exists to hunt down zero-day vulnerabilities such as the yet to be fixed Windows 10 security bomb I wrote about recently. But it’s not just Microsoft that comes under scrutiny from the Google security researchers: a vulnerability in Apple’s iMessage has been found that “bricks” an iPhone and survives hard resets, leaving users having to wipe the device and start factory fresh again. Read full story here: Google Confirms Apple iPhone Bricking iMessage Bomb | Forbes

Read More

More Than 1,000 Android Apps Harvest Data Even After You Deny Permissions | CNET

Permissions on Android apps are intended to be gatekeepers for how much data your device gives up. If you don’t want a flashlight app to be able to read through your call logs, you should be able to deny that access. But even when you say no, many apps find a way around: Researchers discovered more than 1,000 apps that skirted restrictions, allowing them to gather precise geolocation data and phone identifiers behind your back. Read full story here: More Than 1,000 Android Apps Harvest Data Even After You Deny…

Read More

Unless You Want Your Payment Card Data Skimmed, Avoid These Commerce Sites | Ars Technica

More than 100 e-commerce sites around the world are infected with malicious code designed to surreptitiously skim payment card data from visitors after they make purchases, researchers reported on Wednesday. Among those infected are US-based websites that sell dental equipment, baby merchandise, and mountain bikes. Read full story here: Unless You Want Your Payment Card Data Skimmed, Avoid These Commerce Sites | Ars Technica

Read More

Canada Pushes Back As U.S. Congressman Flags Threats Along ‘Totally Wide Open’ Northern Border | CTV News

Canada is defending accusations from a U.S. Congressman that the United States is ignoring security issues along the Canada-U.S. border. “It is the longest, most successful international boundary — un-militarized international boundary — in the history of the world, and we’re determined to keep it that way,” Public Safety Minister Ralph Goodale said in an interview with CTV Power Play Host Don Martin on Wednesday. Read full story here: Canada Pushes Back As U.S. Congressman Flags Threats Along ‘Totally Wide Open’ Northern Border | CTV News

Read More

US Judge Rules That Feds Can’t Force Fingerprint Or Face Phone Unlocks | Engadget

Authorities can’t force people to unlock devices with their faces, fingers or irises, a magistrate judge from California has ruled. Forbes has uncovered a nine-page order denying the search warrant for an investigation looking into a Facebook extortion crime. While the judge admits that investigators were able to establish probable cause for the warrant, she called their request to unlock any phone on the premises with biometrics “overbroad.” The request wasn’t limited to a particular person or device, and authorities would’ve been able to get everyone in the house to…

Read More

Microsoft Will Stop Supporting Windows 7 One Year From Today | CNET

Starting Jan. 14, 2020, exactly one year from Monday, Microsoft will no longer support Windows 7. That means no more updates or security fixes for the operating system. Microsoft will continue to provide security updates for Windows 7 to business customers that pay for support, according to ZDNet, but not individual users. Read full story here: Microsoft Will Stop Supporting Windows 7 One Year From Today | CNET

Read More

Facebook Bug Exposed Up To 6.8M Users’ Unposted Photos To Apps | TechCrunch

Reset the “days since the last Facebook privacy scandal” counter, as Facebook has just revealed a Photo API bug gave app developers too much access to the photos of up to 5.6 million users. The bug allowed apps users had approved to pull their timeline photos to also receive their Facebook Stories, Marketplace photos, and most worryingly, photos they’d uploaded to Facebook but never shared. Facebook says the bug ran for 12 days from September 13th to September 25th. Facebook tells TechCrunch it discovered the breach on September 25th, and…

Read More

US Border Officers Don’t Always Delete Collected Traveler Data | Engadget

Privacy advocates aren’t just concerned about warrantless device searches at the border because of the potential for deliberate abuse — it’s that the officials might be reckless. And unfortunately, there’s evidence this is the case in the US. Homeland Security’s Office of the Inspector General has released audit findings showing that Customs and Border Protection officers didn’t properly follow data handling procedures in numerous instances, increasing the chances for data leaks and hurting accountability. Read full story here: US Border Officers Don’t Always Delete Collected Traveler Data | Engadget

Read More

More Companies Are Chipping Their Workers Like Pets | Engadget

The trend of blundering into the void of adopting new tech, damn the consequences, full speed ahead, continues this week. The Telegraph tells us about “a number of UK legal and financial firms” are in talks with a chip company to implant their employees with RFID microchips for security purposes. “One prospective client,” The Telegraph wrote, “which cannot be named, is a major financial services firm with “hundreds of thousands of employees.” Read full story here: More Companies Are Chipping Their Workers Like Pets | Engadget  

Read More

Smishing: A New Security Threat The Targets Smartphones By Text Message | Digital Trends

Phishing remains a serious security problem. According to some reports, one in every 101 emails are malicious and most of those use some form of phishing as a primary scamming tactic. Most people are aware of phishing, but we only look out for threats when checking email. Criminals, however, are one step ahead. Security experts say phishing has come full-force to texting, and it carries even more potential danger than it does through email. Read full story here: Smishing: A New Security Threat The Targets Smartphones By Text Message | Digital…

Read More